Removed possibilty to make XSS attacks

Changed login.php page